MAL-2025-85306 Malicious code in extreme_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc75725c9260d324f2ccc6f5ce9103d494ea6059c12b8583910e0ecd9791d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89309 Malicious code in olympic_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e635b77944a9e322fd7634553d019070210797c0ab308a50a709c3ccd07396f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-empal86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e1be98b83812d7bb9ef335b7bf9824cefe851d9afce406b0ae64358b56d1ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d5bebf8026ffc1d6f93376a27b5e6643544657ac5caf101fd27fb6ee33870e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in desperate_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60bb0f1545a69ced41b1ed5e9dd965903b3e38a71fe67006dab98360480c28f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d850d8ad6b9e4894f5cf0debe8ecb30f2a3cf3ff21a707edb8f3d75aab2921b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gentle_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15aa3108351227dafb9013d5b20ba3b93f30b75ac9311b7106988cf21cdbb2d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-tapai20-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf390b74cdc725c30fc0eea513f60e5074671a6ec678420afeefac8a0680ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-sambalado17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d324b3142b92426dd3db26bf1ba63031161f0fafbb2463ab716c629114aea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-mangut39-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d187124ef15f753382b95c8926af409128422d8553b7d69352a72bd91416c893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-tongseng37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b469af64bd4522e8986f0eec598ccc1a5ea071ffeecc1f834164108c35e8d1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-papeda39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da60768491cd8311c5830820e66f3040f0b7c40df93984c1d0f8437b7098339e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-soto58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91602ae3d9bca05daa0b26d1d020c0204de5ce71ae2ef37fe2af47271477159d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-semur42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b47a1e9c0d46195f8adcc5d8e67e9df611f8fa3a2693e09cdebf4abcafc5ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-bakwan44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f896a5f9e181898b3fdb413c70936ac6b4c7f5757d97407c90c99f3afd8e9402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-tiwul88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94754bdfd567b2ef3d7b60bfb001a2995a98ecca274bbac256fcc4f8c9a10074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 860417f8a4f1997d1d56a7292998770f49817de561829c535036670fa6f02c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappiest_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b891462a2e35f9941c0ef751b9f6a2016f3f04721c7317b09ea1f00a57b546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-ubi6-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc2e2b33012529e65f647a1dc0734c6eb432a763193582b49f51106ff33bc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91604 Malicious code in utomo-miebogor86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b56a0d5c60c63056b8dee1a31031614efe765fe2e091ac23cc63aff60f89707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...